fix: keep unauthenticated user logged in if allowed #114
This commit is contained in:
parent
f0d0e43929
commit
bc4ad49285
1 changed files with 12 additions and 10 deletions
|
|
@ -415,6 +415,7 @@ const app = new Elysia({
|
|||
user = await jwt.verify(auth.value);
|
||||
|
||||
if (user !== false && user.id) {
|
||||
if (Number.parseInt(user.id) < 2 ** 24 || !ALLOW_UNAUTHENTICATED) {
|
||||
// make sure user exists in db
|
||||
const existingUser = db
|
||||
.query("SELECT * FROM users WHERE id = ?")
|
||||
|
|
@ -428,8 +429,9 @@ const app = new Elysia({
|
|||
return redirect("/login", 302);
|
||||
}
|
||||
}
|
||||
}
|
||||
} else if (ALLOW_UNAUTHENTICATED) {
|
||||
const newUserId = String(randomInt(2 ^ 24, Number.MAX_SAFE_INTEGER));
|
||||
const newUserId = String(randomInt(2 ** 24, Number.MAX_SAFE_INTEGER));
|
||||
const accessToken = await jwt.sign({
|
||||
id: newUserId,
|
||||
});
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue